openssl genrsa -out ca.pem 4096
openssl req -utf8 -config conf/ca.cnf -newkey rsa:2048 -x509 -days 3650 -key ca.pem -out ca.crt
openssl pkcs12 -export -inkey ca.key -in ca.crt -out ca.p12 -passout pass:zjzhang

openssl genrsa -out server.key 4096
openssl req -utf8 -config conf/server.cnf -new -key server.key -out server_reqout.txt
openssl x509 -req -in server_reqout.txt -days 3650 -sha1 -CAcreateserial -CA ca.crt -CAkey ca.pem -out server.crt -extfile conf/extfile.cnf




openssl genrsa -out client.key 4096
openssl req -utf8  -config conf/client.cnf -new -key client.key -out client_reqout.txt
openssl x509 -req -in client_reqout.txt -days 3650 -sha1 -CAcreateserial -CA ca.crt -CAkey ca.pem -out client.crt
openssl pkcs12 -export -inkey client.key -in client.crt -out client.p12 -passout pass:zjzhang


openssl x509 -noout -text -in client.crt



 openssl pkcs12 -export -inkey key.pem -in cert.crt -out cert.p12 -passout pass:zjzhang